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APPLICATION UNDER 37 CFR 1.53(b) 



DOCKET NUMBER: 53588-025 

Prior Application: U.S. Serial No. 08/901,687, filed July 28, 1997 

Art Unit: 2765 ^ 

Examiner: J. Campa " 

Assistant Commissioner for Patents 
Washington, DC 20231 

Sir: 

This is a Request for filing a Continuation application under 37 CFR 1 .53(b) of pending prior apphcation 
Serial No. 08/901,687, filed on July 28, 1997 , entitled A METHOD AND SYSTEM FOR DETECTING FRAUD IN 
A CREDIT CARD TRANSACTION OVER THE INTERNET , by the following named inventor(s): JOHN P. 
PETTITT. 

1 . O I hereby state that the enclosed copy of this prior apphcation is a true copy of the above-identified prior 

application. 

2. Oath or Declaration 

a. n Newly executed (original or copy) 

b. ^ Copy from a prior application (37 CFR 1 .63(d)) 
i. CH Deletion of inventor(s) 

Signed statement attached deleting inventor(s) named in the prior application, see 37 
CFRL63(d)(2) and 1.33(b). 

3. ^ Incorporation By Reference (useable if Box 2b is checked) 

The entire disclosure of the prior application, from which a copy of the oath or declaration is supplied 
under Box 2b, is considered as being part of the disclosure of the accompanying application and is hereby 
incorporated by reference therem. 

4. ^ Preliminary Amendment is enclosed. 

5. ^ An Information Disclosure Statement and PTO 1449 Form are submitted herewith. 

6. ^ Cancel claims 1-16. 
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7. The filing fee is calculated on the basis of the clauns existing in the prior appUcation as amended at 2 and 3 
above: 



mMmmmmmMmm 


NO. OF 
CLAIMS 


iiiiii 


EXTRA 
CLAIMS 


RATE 


AMOUNT 


Total Clauns 


14 


-20 


0 


$18.00 = 


$0.00 


Independent Claims 


5 


-3 


2 


$78.00 = 


$156.00 


Basic Application Fee 


$760.00 


If multiple dependent claims are presented, add $0.00 


$0.00 


Total Application Fee 


$916.00 


Subtract 'A if small entity 


$458.00 


TOTAL APPLICATION FEE DUE 


$458.00 


AMOUNT TO BE CHARGED TO DEPOSIT ACCOUNT NO. 50-0385 


liiiililiili 



7a. □ Enclosed is a Verified Statement to establish small entity status under 37 CFR 1.9 and 37 CFR 1.27. 



7b. ^ A verified Statement to establish small entity status under 37 CFR 1 .9 and 37 CFR 1 .27 was filed in 
prior application and such status is still proper and desired. 

8. ^ The Commissioner is hereby authorized to charge fees under 37 CFR 1.16 and 1.17 which may be 

required, including any extension of time fees to maintain the pendency of the parent application Serial 
No, 08/901,687 or credit any overpayment to Deposit Account No. 50-0385 . 

9. ^ Amend the specification by inserting before the first line the sentence: 

--This application is a continuation of Application Serial No. 08/901,687 filed July 28, 1997.-- 

10. O Priority of Application Serial No. filed on , in is claimed under 35 USC 119. The certified priority 

document(s) were filed in Serial No. on . 

11. ^ The prior application is assigned of record to 

Cybersource Corporation 
San Jose, CA 95128-2545 

12. ^ The power of attorney m the prior application is to: 

Stanislaus Aksman, Reg. No. 28,562; Edward A. Becker, Reg. No. 37,777; Stephen A. Becker, Reg. No. 26,527; 
William H. Beha, Reg. No. 38,038; Marcel K. Bingham, Reg. No. 42,327; John G. Bisbikis, Reg. No. 37,095; Kenneth 
L. Cage, Reg. No. 26,151; Stephen C. Carlson, Reg. No. 39,929; Paul Devinsky, Reg. No. 28,553; Laura A. Donnelly, 
Reg. No. 38,435; Margaret M. Duncan, Reg. No. 30,879; Brian E. Ferguson, Reg. No. 36,801; Michael F. Fogarty, 
Reg. No. 36,139; WilhelmF. Gadiano, Reg. No. 37,136; Keith E. George, Reg. No. 34,111; John A. Hankins, Reg. No. 
32,029; Brian D. Hickman, Reg. No. 35,894; Eric J. Kraus, Reg. No. 36,190; Edward E. Kubasiewicz, Reg. No. 
30,020; Robert E. LeBlanc, Reg. No. 17,219; Jack Q. Lever, Reg. No. 28,149; Raphael V. Lupo, Reg. No. 28,363; 
Christine F. Martin, Reg. No. 39.762; Michael E. McCabe, Jr., Reg. No, 37,182; James H. Meadows, Reg. No. 33,965; 
Michael A. Messma, Reg. No. 33,424; Christopher J. Palermo, Reg, No. 42,056; Joseph H. Paquin, Jr., Reg. No. 
3 1,647; Craig L. Plastrik, Reg. No. 41,254; Robert L. Price, Reg. No. 22,685; Paul A. Roberts, Reg. No. 40,289; Gene 
Z. Rubmson, Reg. No. 33,351; Joy Ann G. Serauskas, Reg. No. 27,952; Michele M. Schafer, Reg. No. 34,717; David J. 
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Serbin, Reg. No. 30,589; Glenn Snyder, Reg. No. 41,428; Arthur I Steiner, Reg. No. 26,106; David L. Stewart, Reg. 
No. 37,578; Leonid D. Thenor, Reg. No. 39,397; Keith J. Townsend, Reg. No. 40,358; Leon R. Turkevich, Reg. No. 
34,035; Christopher D. Ward, Reg, No. 41,367; Damian G. Wasserbauer, Reg. No. 34,749; Aaron Weisstuch, Reg. No. 
P41,557; Edward J, Wise, Reg. No. 34,523; Alexander V. Yampolsky, Reg. No. 36,324; and Robert W. Zehiick 



13. ^ Also enclosed: 

4 Pages of Drawings. 
Postcard. 

14. O A petition, fee and response has been filed to extend the term in the pending prior application imtil . 

Address all future communications to: (May only be completed by applicant, or attorney or agent of record) 

McDermott, Will & Emery 
600 13* Street, N.W. 
Washington, D.C. 20005-3096 



600 13*^ Street, N.W, 
Washington, DC 20005-3096 
(408) 271-2300 CJP:cb 
Date: November jfZ? 1999 
Facsimile: (408)271-2310 



Respectfully submitted, 
MCDERMOTT, WILL & EMERY 



Christopher J. Palermo 
Registration No. 42,056 



EXPRESS MAIL CERTIFICATE OF MAILING 

"Express Mail" mailing label number EL40267223QUS Date of Deposit £l^J_2_j__^f 

I hereby certify that this paper or fee is being deposited with the United States Postal Service "Express Mail Post Office to 
Addressee" service under 37 CFR 1.10 on the date indicated above and is addressed to the Commissioner of Patents and 
Trademarks, Washington, D.C. 20231. 



CATHY BACHMANN 



(Typed or printed name of person mailing paper or fee) 




(Signature of pason mailing paper or fee) 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



In re Application of: 
JOHN P. PETTIT 



Serial No.: Not yet assigned 



Examiner: Not Yet Assigned 



Filed: Herewith 



Art Unit: Not Yet Assigned 



For: A METHOD AND SYSTEM FOR 
DETECTING FRAUD IN A CREDIT 
CARD TRANSACTION OVER A 
COMPUTER NETWORK (As amended) 



Hon. Assistant Commissioner of Patents 

and Trademarks 
Washington, D.C. 20231 



Prior to examining the above-referenced application, please 
amend this application as indicated below. 
IN THE TITLE : 

Cancel the original title and insert: --A METHOD AND SYSTEM 
FOR DETECTING FRAUD IN A CREDIT CARD TRANSACTION OVER A COMPUTER 
NETWORK- - . 
IN THE ABSTRACT : 

Line 2, change ''internet" to --Internet--; 

Line 9, change ''internet" to --Internet--. 
IN THE SPECIFICATION : 

Page 1, line 5, change "internet" to --Internet--; 



PRELIMINARY AMENDMENT 



Sir: 
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line 14, after ''system'^ insert -- ( '^AVS'' ) -- ; 

line 18, change ''in'' to --receiving at--; 

line 20, change ''internet'' to --Internet--; change "is" 
to --are--; delete "for"; 

Page 2, line 2, change "as" to --in--; change "internet" to 
Internet- - ; 

line 3, change "have" to --obtain--; 

line 7, change "systems" to --system--; 

line 8, change "internet" to --Internet--; 

line 15, before "consumer" insert --a--; change 
"internet" to --Internet--; 

line 21, change "internet" to --Internet--; 
Page 3, line 11, after "detection" insert --method, system and 
apparatus-- ; 

line 12, change "internet" to --Internet--; 

line 21, change "cards" to --card--; change "internet" 
to --Internet--; 

line 23, after "includes" insert a comma; 
Page 4, line 2, before "the" insert --and--; before "it" 
insert --information from--; 

line 3, change "IVS" to --("IVS")--; 

line 4, after "determine" insert --whether--; change 
"holder's" to --information--; 

line 5, change "validity" to --is valid--; 
line 15, change "internet" to --Internet--; 

-2- 

53588-025 



line 18, delete ^^that" ; 

line 21, change ''internet" to --Internet--; 
line 22, after ''system" insert - - ( "IIVS" ) - - ; 
Page 5, line 3, change "one" to --IVS 106--; 

line 6, after "history database" insert --222--; change 
"internet" to 

--Internet--; after "ID database" insert --224--; 

line 10, delete "information"; before "database" insert 
- -history-- ; 





line 


13, 


change 


"internet" to - 


--Internet-- ; 




line 


14, 


after " 


system" insert 


--208--; after "check" 


insert 


--202--; 


change "internet" to --Internet--; 




line 


15, 


change 


"internet" to - 


--Internet-- ; 




line 


16, 


change 


"internet" to - 


■ - Internet- - ; 




line 


17, 


after " 


system" insert 


--208; after "check" 


insert 


--202--; 












line 


19, 


change 


"internet" to - 


■-Internet-- ; 




line 


20, 


change 


"internet" to - 


■-Internet-- ; 




line 


21, 


change 


"internet" to - 


■-Internet-- (two 



occurrences) ; 

Page 6, line 2, after "history" insert --check 2 02--; 

line 3, change "202 and 204" to --206--; 

line 4, change "internet" to --Internet--; 

line 5, change "internet" to --Internet--; 

line 8, change "internet" to --Internet--; 
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line 


10, 


change 


''internet" 


to 


--Internet-- ; 


line 


13, 


change 


"internet" 


to 


--Internet-- / 


line 


14, 


change 


''internet" 


to 


--Internet-- ; 


line 


16, 


change 


"internet" 


to 


- -Internet- - ; 


line 


18, 


change 


"internet" 


to 


--Internet-- ; 


line 


22, 


change 


"internet" 


to 


- -Internet- - ; 


line 


23, 


change 


"internet" 


to 


--Internet-- ; 



Page 7, line 1, change "care" to --card--. 
IN THE CLAIMS : 

^IJ Please cancel Claims 1-16 without prejudice or disclaimer, and 

add new Claims 17-30 as follows: 



1 17. (New) A method for detecting fraud in a transaction 

between a consumer and a merchant over the Internet, wherein the 

3 transaction involves the consumer purchasing a product from the 

4 merchant using a credit card, the method comprising the steps of: 

5 receiving, from the merchant, transaction information that 

6 identifies the consumer and the product, including an Internet 

7 address of the consumer; 

8 receiving, from the merchant, credit card information associated 

9 with the consumer that identifies the credit card to be used in 

10 the transaction; 

11 verifying the credit card information based upon a consistency 

12 check that determines whether the credit card information 

13 matches the consumer; 

14 verifying the credit card information based upon a history check 

15 that determines whether the credit card information is 

16 consistent with the transaction information; 
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17 verifying the credit card information based upon an automatic 

18 verification system; 

19 verifying the credit card information based upon an Internet 

20 identification system that determines whether a physical 

21 address specified in the transaction information is consistent 

22 with other physical addresses that have been specified in a 

23 database of records of other transaction information for other 

24 transactions that are associated with the Internet address of 

25 the consumer; 

26 creating and storing a fraud score value based on the verifying 

27 steps that provides the merchant with a quantifiable indication 
....=^28 of whether the credit card transaction is fraudulent. 

;p 1 18. (New) A method as recited in claim 17, wherein the step of 

\2 2 verifying the credit card information based upon an Internet 

^^3 identification system comprises the step of: 

4 receiving, from the merchant, transaction information that 

5 identifies the consumer and the product, including an Internet 
1==^. 6 address of the consumer and a shipping address for the product; 

7 retrieving, from the database of the Internet identification 

;D 8 system, a plurality of records of other transaction information 

9 that are associated with the Internet address of the consumer; 

10 determining whether a physical address contained in each of the 

11 plurality of records matches the shipping address in the 

12 transaction information; 

13 verifying the credit card information when the physical address 

14 matches the shipping address in the transaction information. 
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1 19. (New) A method as recited in claim 17, wherein the step of 

2 verifying the credit card information based "upon an Internet 

3 identification system comprises the step of: 

4 verifying the credit card information based upon an Internet 

5 identification system that determines whether a physical 

6 address specified in the transaction information is consistent 

7 with other physical addresses that have been specified in other 

8 transaction information for other transactions associated with 

9 an Internet email address of the consumer. 



I 20. (New) A method as recited in claim 17, wherein the step of 

i;;:; 2 verifying the credit card information based upon an Internet 

ll'j 3 identification system comprises the step of: 

4 retrieving a plurality of records of other transactions from an 

;5I 5 Internet identification system that associates the credit card 

6 number with other physical addresses that have been specified 

7 in other transaction information for other transactions 
1'''^ 8 associated with an Internet address of the consumer; 
;[]i9 creating and storing a map of the other transactions; 

■=4o verifying the credit card information based upon the map of other 

11 transactions, by determining whether a physical address 

12 specified in the transaction information is consistent with the 

13 other physical addresses in the other transaction information. 

1 21. (New) A method as recited in claim 17, further comprising 

2 the step of: 

3 weighting each of the verifying steps according to an importance 

4 as determined by the merchant of each verifying step to the 

5 credit card transaction. 
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1 22. (New) A method as recited in claim 17, wherein the step 

2 of verifying the credit card information based upon a history check 

3 comprises the step of: 

4 receiving, from other merchants, records of other transactions 

5 involving the other merchants and the consumer; 

6 storing the records of other transactions in a transaction 

7 history database that can be accessed and supplemented by other 

8 merchants with information about other credit card transactions 

9 with the consumer and such other merchants; 

10 verifying the credit card information based upon the transaction 

1311 history database by determining whether the credit card 

32 information is consistent with the records of other 

^Pi3 transactions in the transaction history database. 

|5 1 23. (New) A method as recited in claim 17, wherein the step 

- 2 of verifying the credit card information based upon an Internet , 

\j!,3 identification system comprises the step of: 

j'-4 receiving, from other merchants, records of other transactions 

ijiS involving the other merchants and the consumer; 

'^=^■'6 storing the records of other transactions in an Internet 

7 identification database that can be accessed and supplemented 

8 by other merchants with information about other credit card 

9 transactions with the consumer and such other merchants; 

10 verifying the credit card information based upon the Internet 

11 identification database by determining whether a physical 

12 address specified in the transaction information is consistent 

13 with other physical addresses that have been specified in 

14 records of the Internet identification database for other 

15 transactions associated with an Internet address of the 

16 consumer. 
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1 24 . (New) A method for detecting fraud in a credit card 

2 transaction between a consumer and a merchant over the Internet 

3 comprising the steps of: 

4 receiving, from the consumer, credit card information relating to 

5 the transaction; 

6 creating and storing a consistency check mechanism, a transaction 

7 history check mechanism, an automatic verification mechanism 

8 and an Internet identification mechanism, each of which may 

9 indicate whether the credit card transaction is fraudulent 
10 based on transaction information, in combination with 

ijll information that identifies the consumer, in which the 

p2 transaction information provides the merchant with a 

:tl3 quantifiable indication of whether the credit card transaction 

i 'a ii 

yl4 is fraudulent; 

^J[5 receiving from the merchant and storing a weight value associated 

16 with each of the mechanisms and storing the weight value in 

fn? association with information that identifies the mechanisms, 
wherein each of the weight values signifies an importance to 

39 the merchant of the value to the credit card transaction of the 

alO associated mechanism; 

21 weighting each value of the plurality of parameters according to 

22 the weight values; 

23 verifying the credit card information based upon an Internet 

24 identification system that determines whether a physical 

25 address specified in the transaction information is consistent 

26 with other physical addresses that have been specified in a 

27 database of records of other transaction information for other 

28 transactions that are associated with the Internet address of 

29 the consumer; 

30 creating and storing a fraud score value based on the verifying 

31 steps that provides the merchant with a quantifiable indication 

32 of whether the credit card transaction is fraudulent. 

-8- 
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1 25. (New) A method as recited in claim 24 wherein the steps 

2 of creating and storing further include: 

3 creating and storing a transaction history check mechanism that 

4 includes a transaction history database which can be accessed 

5 and supplemented by other merchants with information about 

6 transactions of the consumer with such other merchants. 

1 26. (New) A method as recited in claim 24 wherein the steps 

2 of creating and storing further include: 

3 creating and storing an Internet identification verification 

4 system (IIS) mechanism that includes an Internet address 

5 database that can be accessed and supplemented with new 

6 Internet addresses as Internet address expansion occurs. 

1 27. (New) A method as recited in claim 24 wherein the steps 

2 of creating and storing further include: 

3 obtaining other transactions utilizing an Internet address that 

4 is identified with the credit card transaction; 

5 constructing a map of credit card numbers based upon the other 

6 transactions; 

7 utilizing the map of credit card numbers to determine if the 

8 credit card transaction is valid. 

1 28. (New) An integrated verification system for determining 

2 whether a transaction between a merchant and consumer over the 

3 Internet is fraudulent, wherein the transaction involves the 

4 consumer purchasing a product from the merchant using a credit 

5 card, the system comprising: 

6 means for receiving, from the merchant, transaction information 

7 that identifies the consumer and the product; 
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8 means for receiving, from the merchant, credit card information 

9 associated with the consumer that identifies the credit card to 

10 be used in the transaction; 

11 means for verifying the credit card information based upon a 

12 consistency check that determines whether the credit card 

13 information matches the consumer; 

14 means for verifying the credit card information based upon a 

15 transaction history check that determines whether the credit 

16 card information is consistent with the transaction 

17 information; 

18 means for verifying the credit card information based upon an 
^49 automatic verification system; 

C20 verifying the credit card information based upon an Internet 

1:21 identification system that determines whether a physical 

-;^!22 address specified in the transaction information is consistent 

3:23 with other physical addresses that have been specified in a 

^''24 database of records of other transaction information for other 

=.-^25 transactions that are associated with the Internet address of 

J,6 the consumer; 

"417 means for creating and storing a fraud score value based on the 

'S28 verifying steps that provides the merchant with a quantifiable 

29 indication of whether the credit card transaction is 

30 fraudulent . 

1 29. (New) A computer readable medium containing program 

2 instructions for detecting fraud in a credit card transaction 

3 between a consumer and a merchant over the Internet, wherein the 

4 transaction involves the consumer purchasing a product from the 

5 merchant using a credit card, wherein execution of the program 

6 instructions by one or more processors of a computer system causes 

7 the one or more processors to carry out the steps of: 

8 receiving, from the merchant, transaction information that 

9 identifies the consumer and the product; 

-10- 
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10 receiving, from the merchant, credit card information associated 

11 with the consumer that identifies the credit card to be used in 

12 the transaction; 

13 verifying the credit card information based upon a consistency 

14 check that determines whether the credit card information 

15 matches the consumer; 

16 verifying the credit card information based upon a transaction 

17 history check that determines whether the credit card 

18 information is consistent with the transaction information; 

19 verifying the credit card information based upon an automatic 

20 verification system; 

verifying the credit card information based upon an Internet 

'•^22 identification system that determines whether a physical 

,|:23 address specified in the transaction information is consistent 

with other physical addresses that have been specified in a 

1325 database of records of other transaction information for other 

^26 transactions that are associated with the Internet address of 

1^=^27 the consumer; 

i^n28 creating and storing a fraud score value based on the verifying 

Ni29 steps that provides the merchant with a quantifiable indication 

;fij30 of whether the credit card transaction is fraudulent. 

1 30. (New) A method for detecting fraud in a transaction 

2 between a consumer and a merchant over the Internet, wherein the 

3 transaction involves the consumer purchasing a product from the 

4 merchant using a credit card, the method comprising the steps of: 

5 receiving, from the merchant, transaction information that 

6 identifies the consumer and the product; 

7 receiving, from the merchant, credit card information associated 

8 with the consumer that identifies the credit card to be used in 

9 the transaction; 

10 verifying the credit card information based upon a consistency 

11 check that determines whether the credit card information 

-11- 
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12 matches the consumer, a transaction history check that 

13 determines whether the credit card information is consistent 

14 with the transaction information, and an automatic verification 

15 system; 

16 verifying the credit card information based upon an Internet 

17 identification system that determines whether a physical 

18 address specified in the transaction information is consistent 

19 with other physical addresses that have been specified in a 

20 database of records of other transaction information for other 

21 transactions that are associated with the Internet address of 

22 the consumer; 

::;r.,.23 crcatiug and storing a fraud score value based on the verifying 

'024 steps that provides the merchant with a quantifiable indication 

r25 of whether the credit card transaction is fraudulent. 
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REMARKS 

This is a Continuation application based on Ser. No. 
08/901,687, filed July 28, 1997, now allowed (^^parent 
application"). In the parent application, Claims 1-5, 7-15, 17-19 
were rejected in the Office Action mailed July 06, 1999, and these 
were the only rejected claims identified in that Office Action. The 
Applicants now address the substance of the objections and 
rejections of that Office Action in the context of the amended 
claims. No new matter is added. 

ISSUES NOT BASED ON PRIOR ART 

1. SPECIFICATION 

The first Office Action in the parent application objected to 
the specification as containing grammatical errors and 
typographical errors. Applicant has thoroughly reviewed the 
specification and corrected it in this amendment. Applicant 
believes that all informalities have been addressed, 

2. ANTECEDENT BASIS 

The second Office Action of the parent application (paper 
number 11, mailed July 06, 1999) objected to certain claims based 
on lack of antecedent basis. The Applicant has carefully reviewed 
and amended the claims to address all antecedent basis issues. 
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REJECTIONS BASED ON PRIOR ART 

1. CLAIM REJECTIONS - 35 U.S.C. § 103(a) (ROSE, GOPINATHAN, 

TOM) 

Claims 1-5, 7-9 and 11-15 of the parent application were 
rejected under 35 U.S.C. § 103(a) as being unpatentable over ROSE 
(5757917) in view of GOPINATHAN (5819226) and TOM (5696907) . The 
rejection is traversed. 

As a threshold matter. Applicants respectfully suggest that 
the analytical approach taken by the second Office Action is 
legally improper. Specifically, in the discussion of former claim 
1, pages 6-8 of the second Office Action argue that individual 
steps or features of the claims are obvious. This is improper. The 
correct approach addresses the combination recited in the claim as 
a whole , Stratoflex, Inc. v. Aeroau ip Corp., 713 F.2d 1530, 218 
USPQ 871 (Fed. Cir. 1983); MPEP § 2141.02. The Office Action may 
not pick and choose elements of the claimed combination, assert 
that any individual element would have been obvious, and then 
reject the claimed combination as obvious, absent a teaching or 
suggestion in the art to create the entire co mbination of the claim 
as a whole . 

The new claims recites a method and system providing distinct 
improvement over AVS systems. Independent Claims 17, 24, 28, 29, 
and 3 0 feature, among other things, verifying the credit card 
information based upon an Internet identification system that 
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determines whether a physical address specified in the transaction 
information is consistent with other physical addresses that have 
been specified in a database of records of other transaction 
information for other transactions that are associated with the 
Internet address of the consumer. 

The second Office Action of the parent application addressed 
this feature in the context of former Claim 2. Specifically, the 
Office Action contended that TOM discloses "an Internet 
identification system parameter" in the form of ''residence 
stability.'' This is incorrect and appears to reflect a 
misunderstanding of the meaning of "Internet identification 
system. " 

Each of the new independent claims features verifying the 
credit card information based upon an Internet identification 
system that determines whether a physical address specified in the 
transaction information is consistent with other physical addresses 
that have been specified in a database of records of other 
transaction information for other transactions that are associated 
with the Internet address of the consumer. TOM's concept of 
"residence stability" is not the "Internet identification system" 
as claimed. TOM's teaching of "residence stability," at best, 
suggests a determination of whether a loan applicant is transient, 
i.e., the applicant has had multiple residence addresses in a short 
period of time. This is a completely different concept from that of 
the independent claims - i.e., whether the consumer has given 

-15- 
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different "ship-to" addresses in past Internet transactions, as 

indicated by information that is associated with the consumer's 

Internet address, e.g., an email address, IP address, or other 

unique online identifier. 

With regard to former Claim 1, the Office Action states: 

''[TOM] teaches: - each of the transaction values being 
weighted according to an importance, as determined by 
the merchant or from past experience, of that value to 
the credit card transaction, so as to provide a 
merchant with a quantifiable indication of whether the 
credit card transaction is fraudulent (see column 5, 
lines 24-67 and column 6, lines 1-46; Figure 7, a 
neural network is used to provide risk and credit 
evaluations of newly proposed financial service 
applications based upon a plurality of parameters which 
are weighted according to the information contained 
therein) , ... It would have been obvious to one having 
ordinary skill in the computer and business arts at the 
time of applicant's invention to combine the teachings 
found in Rose and Gopinathan et al . with Tom' s 
teachings, which shows weighting various parameters in 
an instant credit application based upon a credit 
manager's past experience to provide indications of 
credit worthiness for purposes of evaluating financial 
service applications. One having ordinary skill in the 
computer and business arts at the time of applicant's 
invention would have been motivated to combine the . . . 
teachings to get the advantage of placing a greater 
significance upon certain weights over others in 
verifying whether an instant credit card transaction is 
fraudulent . . . , " 

Applicant disagrees. The argument glosses over differences between 
the claimed invention and the teachings of the references. The 
''parameters" in TOM are different from the parameters of the 
present application. TOM describes weighting nodes of a neural 
network in which each node corresponds to a value of a variable 
that describes the consumer. In contrast, the weighting parameters 



53588-025 



-16- 



that are disclosed and claimed by Applicant are different classes 
of tests or checks rather than individual variable values. 

In Applicant's disclosure, a "parameter" is a test or check, 
not a scalar value. This usage may be unconventional, which is 
permitted, and it is not the same usage as TOM. 

Further, risk and credit evaluations of newly proposed 
financial service applications, or ''instant credit applications," 
as described in TOM, are not the same as fraud detection in a 
credit card transaction. Risk and credit evaluations involve 
determining the creditworthiness of an applicant for a loan or 
other financial service. For example, such evaluations may 
determine whether the consumer has sufficient available credit to 
complete a desired transaction. In contrast, fraud detection 
involves determining whether a consumer offering a credit card 
number is not actually the cardholder. Applicant has discovered 
that fraud detection can be carried out effectively based on 
external transaction information rather than information describing 
the consumer, including the consumer's amount of available credit. 
The risk and credit evaluations contemplated by TOM do not involve 
a loan applicant falsifying his or her identity. In short, TOM 
addresses a different problem and is improperly combined with ROSE 
and GOPINATHAN. 

Moreover, the claimed invention does not involve verifying 
whether "an instant credit card transaction" is fraudulent. The 
Office Action appears to coin this term in order to suggest an 
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association of the claimed invention and TOM, This terminology is 
incorrect and not used in the specification or claims. 

Claim 18 elaborates on the Internet identification system 
feature of Claim 17 by specifically reciting a particular mechanism 
for obtaining the Internet identification information, and 
determining whether a physical address contained in each of the 
plurality of records matches the shipping address in the 
transaction information. This specific comparison is not shown in 
the art of record. 

Claim 19 specifically features use of the consumer's email 
address as one kind of identification element in the Internet 
identification system. The combination of steps in Claim 19 is not 
taught or suggested by the art of record. 

Claim 20 specifically features use of a map of other 
transactions in combination with the steps of Claim 17. A similar 
feature was found allowable in the parent application. 

Claim 21 features weighting each of the verifying steps 
according to an imporance as determined by the merchant of each 
verifying step. For the reasons given above with respect to the 
weighting feature of former claim 1, Claim 21 is allowable. 

Claim 22 features receiving records of other transactions from 
other merchants and updating the transaction history database 
accordingly. The shared database feature of Claim 22 is not found 
in the art of record. The Office Action addresses this feature in 
the context of former Claim 3 and Claim 4, and argues official 
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notice. Reliance on official notice is improper because the subject 
matter of the official notice is not ''capable of instant and 
unquestionable demonstration as being 'well-known' in the art/' see 
MPEP § 2144,03. Applicant requests the Office to cite a specific 
reference to substantiate the basis for the official notice. 
Conventional practice is for a merchant to secure its own database 
and prevent third parties, including other merchants, from adding 
to it. Conventional practice is for the merchant to look only in 
its own database for records of past transactions with the same 
consumer . 

Claim 23 features receiving records from other merchants and 
updating the Internet identification system database. The shared 
database feature of Claim 23 is not found in the art of record. 

Each of new claims 24-3 0 features one or more of the foregoing 
features and is believed to be allowable for the corresponding 
reasons set forth above . 

Specifically, Claim 24 recites use of a consistency check 
mechanism, transaction history check mechanism, automatic 
verification system, and the Internet identification system. The 
Office Action asserts that TOM teaches such features, however, TOM 
does not teach a consistency check parameter which is used to 
determine whether the credit card information is consistent. TOM 
teaches analysis of information including residence stability. In 
contrast. Applicant discloses and claims a consistency check 
parameter, which allows one to determine whether the credit 
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information is consistent, i.e., does the credit information match 
the user. See Specification at page 5. Residence stability 
information (whether a consumer has several different past 
addresses) is not the same as testing whether the credit 
information supplied by the consumer matches the consumer. 

TOM does not teach a history check parameter. TOM describes 
considering credit history information. However, the claimed 
transaction history check is not credit history information; it is 
information about prior transactions carried out by the same 
consumer . 

TOM does not teach an Internet identification system parameter 
as claimed. The Office Action suggests that the ''residence 
stability'' information of TOM is an Internet identification system 
parameter, but information about whether a consumer has had 
multiple residence addresses in a short period of time is not the 
same as determining whether the same credit card is being used by a 
consumer claiming several different Internet addresses. 

Claim 24 includes an automatic verification system mechanism. 
Addressing canceled Claim 2, the Office Action states that an 
automatic verification system parameter is obvious and that 
applicant admits it is prior art. 

Applicant disagrees. Admitting that a particular element is 
known in the art is not an admission that a combination of that 
element with others would have been obvious. Carrying out credit 
card verification, through manual observation or use of an AVS 
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system, is old. But the selection and use of an AVS system, in 
combination with particular parameters that represent external 
factors, or information in combination with consumer- identifying 
information, is not shown in the art of record. There is no 
suggestion in the art of record to combine an AVS system with the 
teachings of the cited art. 

For the reasons given above, the new claims are believed to be 
in allowable condition in light of the art of record. 

CONCLUSION 

For the reasons set forth above, it is respectfully submitted 
that all of the pending claims are now in condition for allowance. 
Therefore, the issuance of a formal Notice of Allowance is believed 
next in order, and that action is respectfully requested. 

The Examiner may contact the undersigned by telephone if such 
contact would further the examination of the present application. 

Petition for Extension: Applicant hereby petitions, under 37 
C.F.R. 1.13 6, for such extensions of time as may be necessary to 
cause this Preliminary Amendment and the associated Continuation 
application to be timely on the filing date granted to it by the 
Office . 

The Commissioner is authorized to charge any fees due in 
connection with this response, and to credit any overpayment to 
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Deposit Account No. 50-0385. A duplicate of this paper is filed 
herewith. 

Respectfully submitted, 
McDERMOTT, WILL & EMERY 
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1999 



(408) 271-2300 

600 13*^^ Street, N.W. 

Washington, D.C. 20005 




Christopher J. Palermo 
Reg. No. 42,056 
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A METHOD AND SYSTEM FOR DETECTING FRAUD IN A CREDIT 
CARD TRANSACTION OVER THE INTERNET 



FIELD OF THE INVENTION 

The present invention relates generally to credit card transactions and 
specifically to detecting fraud in such credit card transactions when ordering and 
downloading information over the internet. 

BACKGROUND OF THE INVENTION 

Credit card transactions are being utilized in a variety of environments. In a 
typical environment a user provides a merchant with a credit card, and the merchant 
through various means will verify whether that information is accurate. For 
example, referring now to Figure 1, a typical credit card verification ^stem 10 is 
shown. In such a system, a merchant 12 receives a credit card from the customer 14. 
The merchant then verifies the credit card information through an automated 
verification system 16. 

These systems work well in a credit card transaction in which either the 
customer has a face-to-fece meeting with the merchant or the merchant is actually 
shipping a package or the like to the address of a customer. The verification 
procedure typically includes in the AVS system address information and identity 
information. However, when downloading information from an onhne service or the 
internet, the address and identity information is not enough for to adequately verify 
that the customer who is purchasing the goods is actually the owner of the credit 
card. For example, an individual may have both the name and the address of a 
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particular credit card holder and that information in a normal transaction may be 
sufficient for authorization of such a transaction. However, as an internet 
transaction it is possible to have all the correct information related to the particular 
credit card holder through unscrupulous means, and therefore, be able to 
fraudulent^ obtain information. 

Accordingly, what is needed is a system and method that overcomes the 
problems associated with a typical verification systems for credit card transactions 
particularfy in the internet or online services environment The ^tem should be 
easily implemented within the existing environment and should also be 
straightforwardly applied to existing technology. The present invention addresses 
such a need. 

SUMMARY 

A method and system for detecting firaud in a credit card transaction between 
consumer and a merchant over the internet The method and system comprises 
obtaining credit card information relating to the transaction from the consumer; and 
verifying the credit card information based upon a variety of parameters. The 
variety of parameters are weighted so as to provide a merchant with a quantifiable 
indication of whether the credit card transaction is fraudulent. In so doing, an 
integrated verification ^stem is provided which allows a merchant, or the like, to 
accurately and efficiently determine the validity of a transaction over the internet 
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BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is diagram of the prior art verification system for credit card 

transaction. 

Figure 2 is a verification system in accordance with the present invention. 
Figure 3 is a flow chart of the verification system in accordance with the 
present invention. 

Figure 4 is a flow chart of the integrated verification ^stem in accordance 
with the present invention. 

DETAILED DESCRIPTION 

The present invention relates to a fraud detection for use in credit card 
transaction over online services or the internet The following description is 
presented to enable one of ordinary skill in the art to make and use the invention 
and is provided in the context of a patent application and its requirements. Various 
modifications to the preferred embodiment will be readify apparent to those skilled 
in the art and the generic principles herein may be applied to other embodiments. 
Thus, the present invention is not intended to be limited to the embodiment shown 
but is to be accorded the widest scope consistent with the principles and features 
described herein. 

The present invention provides an integrated verification system for credit 
cards transactions over an online service or the internet. Referring now to Figure 2, 
what is shown is a block diagram of a system 100 which would use the verification 
procedure in accordance with the present invention. System ICQ includes similar to 
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Figure 1, a customer 102 and a merchant 104. The customer 102 provides the 
merchant with a credit card, the merchant then sends it to an integrated verification 
system IVS 106 which includes a variety of parameters providing consistency, history 
and other information in an integrated fashion to determine the credit card holder's 
validity. The IVS 106 is typicalfy implemented in software for example in a hard 
disk, floppy disk or other computer-readable medium. In a typical embodiment, 
when the customier 102 orders a particular piece of software to be downloaded from 
a merchant 104, the merchant will provide the credit card number, e-mail address 
and other pertment information to the IVS 106. The integrated verification system 
106 then weights the variety of parameters so as to provide a merchant with a 
quantifiable indication on whether the credit and transaction is fraudulent To more 
clearly describe the operation of a system and method in accordance with the 
present invention, refer now to the following discussion in conjunction with the 
accompanying figures. 

Figure 3 shows a simple block diagram for providing an integrated verification 
of a credit card transaction over the internet. The IVS 106 includes a controller 212 
which receives the credit information from the merchant and then sends fliat 
information on to a variety of parameters 202-208. The plurality of parameters that 
operate on the information to provide an indication of whether the transaction is 
vaUd. In this embodunent, the plurality of parameters comprises a history check 
202, a consistency check 204, an automatic verification ^stem 206 and an internet 
identification verification system 208. The output or individual indications of validity 
of these parameters are provided to fraud detector 210. The fraud detector 210 
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combines these inputs to provide an integrated indication of whether the particular 

transaction is valid, 

Consisten<7 check 204 allows one to determine whether the credit 
information is consistent, i.e., does the credit information match the user and other 
information. AVS system 206 provides similar information as AVS 16 described in 
Figure L A key feature of both the history database and the internet ID database 
is that they can be accessed and the information there within can be supplemented 
by a variety of other merchants and, therefore, information from those merchants is 
obtainable thereby. 

History information check 202 is provided which also accesses a database 222 
which may include card number and email information. The history check 202 will 
also actively determine if the particular transaction matches previous database 
information within the history database 222. Therefore, the internet ID 
verification system and history check increases in utihty over time. The internet ID 
verification system 208 provides for a system for verifying the validity of an internet 
address, the details of which will be discussed hereinafter. The internet 
identification verification system similar to the history check includes a database 224 
which can be added to by other merchants. 

In addition, the internet identification verification system 208 accesses and 
communicates with a database of internet addresses. This system will be used to 
verify whether the internet address is consistent with other internet addresses being 
used in transactions utilizing this credit card. 

These different parameters are weighted via weighting blocks 214-220, 
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respectively, dependent upon the particular credit card transaction. For example, if 
the amount of dollar transaction is critical, it may be appropriate for the history and 
AVS system 202 and 204 to be weighted more critically than the other parameters. 
On the other hand, if a critical pomt is the consistency of the internet address, then 
the consistency check 204 and the internet identification system 208 may be more 
critical. Accordingly, each of the verification parameters 202-208 may be weightedHj 
in different amounts depending upon its importance in the verification process. 

A particularly important feature of the present invention is the internet 
identification system 208 and its operation within the integrated verification system 
106. Through this system 208, it is possible to quickly determine if an internet 
identification address is being utilized fraudulently. To describe this feature in more 
detail, refer now to Figure 4 and the accompanying discussion. 

Figure 4 is a flow chart of the internet identification verification ^stem 208. 
The goal of internet identification verification system 208 is to determine whether 
the physical address or the physical location of tiie address compares to a previous 
physical location tiiat was used for that particular internet address. Accordingly, in 
the flow chart of Figure 4, first the number of ti-ansactions that had been processed 
usmg that particular internet address is obtained from the database 224, via step 302. 
Thereafter, a map of those transactions is constructed based on those obtamed 
transactions, via step 304. Finally, the constructed map is used to determine if the 
new credit card transaction is vahd, via step 306. Accordingly, tiirough a system and 
method in accordance with this ^stem, an internet identification verification system 
is provided which can quickly and easily determine whether a particular internet 
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address is related to a particular credit care transaction. 

Accordingly, what is provided is a system and method for accurately 
determining whether a particular credit card transaction is a fraudulent one. The 
integrated verification system in accordance with the present invention provides for 
weighting the variety of parameters so as to provide a merchant with a quantifiable 
indication on whether the credit and transaction is fraudulent 

Although the present invention has been described in accordance with the 
embodiments shown, one of ordinary skill m the art will recognize that there could 
be variations to the embodiment and those variations would be within the spirit and 
scope of the present invention. Therefore, although the present invention was 
described in terms of a particular verification system, one of ordinary skill in the art 
readify recognizes, that any number of parameters can be utilized and their use 
would be within the spirit and scope of the present invention. Accordingly, many 
modifications may be made by one of ordinary skill without departing fi-om the spirit 
and scope of the present invention, the scope of which is defined by the following 
claims. 
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CLAIMS 

What is claimed is: 

1. A method for detecting fraud in a credit card transaction between 
consumer and a merchant over the internet comprising the steps of: 

a) obtaining credit card information relating to the transaction from the 
consumer; and 

b) verifying the credit card information based upon a plurality of ' 
parameters; the plurality of parameters being weighted so as to prpvide a merchant 
with a quantifiable indication of whether the credit card transaction is fraudulent 

2. The method of claim 1 wherein the plurality of parameters include a 
consistency check, a history check, an automatic verification system and an internet 
identification system, 

3. The method of claim 2 wherein the history check includes a database 
which can be accessed and supplemented by other merchants, 

4. The method of claim 2 wherein the internet identification system 
includes a database which can be accessed and supplemented by other merchants* 

5. An integrated verification system for determining credit card 
transactions between a merchant and consumer over the internet are fi*audulent, the 

system comprising: 

a controller for receiving credit card transaction information; 

a plurality of parameters for receiving the transaction information from 
the controller means and for providing individual indications of the validity of 
transactions; 
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and detector means for receiving the indications of validity and 
providing an integrated indication of validity. 

6. The system of claim 5 wherein each of the plurality of parameters 
includes a weighting factor. 
5 7. The system of claim 5 wherein the plurality of parameters include a 

consistency check, a history check, an automatic verification system and^ an internet 
identification system. 

8. The system of claim 7 wherein the history check includes a database 
which can be accessed and supplemented by other merchants. 
10 0 9. The system of claim 7 wherein the internet identification system 

includes a database which can be accessed and supplemented by other merchants. 
:^ 10. A method for verifying the validity of a credit card transaction over the 

internet comprising the steps of: 

a) obtaining other transactions utilizing an internet address that^is 
15 2 identified with the credit card transaction; y U 

b) constructing a map of credit card numbers based upon the other 

c) utilizing mapped transactions to determine if the credit card 
transaction is valid. 

20 11. A ^tem for detecting fraud in a credit card transaction between 

consumer and a merchant over the internet comprising: 

means for obtaining credit card information relating to the transaction 
from the consumer; and 
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means for verifying the credit card information based upon a plurality 
of parameters; the plurality of parameters being weighted so as to provide a 
merchant with a quantifiable indication of whether the credit care transaction is 
fraudulent 

12. The system of claim 11 wherein the plurality^ of parameters include a 
consistency check, a history check, an automatic verification system and an internet 
identification system. 

13. The system of claim 12 wherein the history check includes a database 
which can be accessed and supplemented by other merchants, 

14. The system of claim 12 wherein the internet identification system 
includes a database which can be accessed and supplemented by other merchants. 

15. A computer readable containing program instructions for detecting 
fraud in a credit card transaction between consumer and a merchant over the 
internet, the program instructions: 

a) obtaining credit card information relating to the transaction from the 
consumer; and 

b) verifying the credit card information based upon a plurality of 
parameters; the plurality of parameters being weighted so as to provide a merchant 
with a quantifiable indication of whether the credit card transaction is fraudulent 

16. A computer readable medium containing program instructions for 
verifying the validity of a credit card transaction over the internet, the program 
instructions: 

a) obtaining other transactions utilizing an internet address that is 
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identified with the credit card transaction; 

b) constructing a map of credit card numbers based upon the other 
transactions and; 

c) utilizing mapped transactions to determine if the credit card 
transaction is valid. 
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ABSTRACT 

A method and ^tem for detecting fraud in a credit card transaction between 
consumer and a merchant over the internet The method and system comprises 
obtaining credit card information relating to the transaction from the consumer; and 
verifying the credit card information based upon a variety of parameters. The 
variety of parameters are weighted so as to provide a merchant with a quantifiable 
indication of whether the credit card transaction is fraudulent. In so doing, an 
integrated verification system is provided which allows a merchant, or the like, to 
accurately and efficiently determine the validity of a transaction over the internet 
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